Privacy Policy

1. Who We Are

Advocate is operated by ADVOCATE MCP LLC, a company based in Texas (“Advocate,” “we,” “us,” or “our”). This Privacy Policy explains what personal information we collect through the Advocate service (the “Service”), how we use it, who we share it with, and the choices you have. It applies to our websites and the Service, and it does not apply to the practices of third parties that we do not own or control.

2. What We Collect

We collect only the information we need to operate the Service. Today, that consists of the following.

Account email addresses. When you sign in, we collect the email address you use to receive a magic sign-in link. We use this address to authenticate you and to communicate with you about your account and the Service.

Request-access form submissions. When you ask for access to the Service, we collect the business name and contact email address you provide and, if you choose to include it, your business website URL.

Crawler-detection logs.When an automated client or AI crawler requests one of our pages, we record a one-way hashed version of the requester’s IP address, the user-agent string it sends, a timestamp, and the slug (page identifier) of the business profile that was visited. We do not store the raw IP address.

We do not collect payment card details directly. If and when paid plans launch, payment information will be handled by our payment processor described under “Sharing and Subprocessors” below.

3. How We Use It

We use the information we collect to operate, provide, maintain, and improve the Service; to deliver magic sign-in links and authenticate you; to receive and process access requests and communicate with you about them and about your account; to publish and maintain the business profile you ask us to create; and to understand which AI systems are indexing, crawling, or otherwise interacting with business profiles so that we can measure and report on that activity. We also use information as needed to protect the security and integrity of the Service, to investigate and prevent misuse, and to comply with our legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

4. Sharing and Subprocessors

We do not sell your personal information. We share information only with the service providers (“subprocessors”) that help us operate the Service, and only to the extent they need it to provide their services to us. Our current and planned subprocessors are Neon, which provides our database hosting; Vercel, which provides application hosting and compute; Resend, which delivers our email, including magic sign-in links and access-request notifications; Stripe, which will provide payment processing (planned and not yet active); and Cloudflare, which provides content delivery and protection against denial-of-service attacks.

We may also disclose information when we believe in good faith that doing so is required by law or legal process, or is reasonably necessary to enforce our terms or to protect the rights, safety, or property of Advocate, our users, or others.

5. Retention

We keep personal information for as long as it is needed for the purposes described in this policy. Account information is retained while your account is active. Request-access submissions are retained for a reasonable period for our business purposes, such as evaluating and following up on access requests. Crawler-detection logs, which contain only a hashed IP address and request metadata, are retained in aggregate for analytics and security purposes. We may retain information for longer where we are required to do so by law or where it is necessary to resolve disputes or enforce our agreements.

6. Your Rights

Depending on where you live, you may have rights over your personal information, such as the right to access, correct, or delete it. To make any of these requests, contact us at max@advocate-mcp.com, and we will respond consistent with applicable law. We may need to verify your identity before acting on a request.

7. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this policy and, where appropriate, provide additional notice. Your continued use of the Service after an updated policy takes effect constitutes your acceptance of the changes.

8. Contact

If you have any questions about this Privacy Policy or how we handle your information, or if you would like to make a privacy request, contact us at max@advocate-mcp.com.